---
title: Privileged Azure Entra user is a guest account
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > Privileged Azure Entra user is a guest
  account
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# Privileged Azure Entra user is a guest account

## Description{% #description %}

A privileged Azure Entra user is an enabled guest account. Guest accounts are users external to your organization that have been invited into your Azure tenant, and they open an additional attack vector. When a guest account also holds a privileged role, a compromise of that external identity could be used to abuse those privileges within your tenant. Guest accounts should be reviewed to ensure their level of access is the minimum required for their role and that they are removed when no longer required.

## Remediation{% #remediation %}

1. Review the access level of all guest accounts in your tenant.
1. Remove any guest accounts that do not require access to your tenant.
1. Ensure that the access level of guest accounts is the minimum required for their role, and remove privileged role assignments that are not strictly necessary.